perspectiva aiqbenchCipuri & infrastructură

OpenAI's automated research pipeline successfully identified over 1,700 confirmed Linux kernel vulnerabilities, including nearly 950 local privilege escalation exploits, demonstrating significant efficiency in security discovery. The operation generated high-value patches at a fraction of traditional costs while introducing novel exploit techniques validated by independent experts. This effort highlights the growing role of advanced AI agents in accelerating critical infrastructure hardening and vulnerability remediation cycles.

Surse care acoperă36Kr, SiliconANGLE, Google Cloud Blog, Cybersecurity News

OpenAI Automation Pipeline Discovers 1,724 Linux Kernel Vulnerabilities

36Kr4 noiembrie 20261 min de cititArticolul și perspectiva sunt în engleză.

OpenAI's automated vulnerability research pipeline identified 2,308 candidate samples of Linux kernel vulnerabilities, confirmed 1,724 through dynamic reproduction, and generated 948 local privilege escalation (LPE) exploits that allow unprivileged users to gain root access. The five-stage process includes vulnerability discovery, dynamic verification, exploitability assessment, patch generation, and human review. The second scan cost approximately $1.21 million in API points but yielded 948 independent LPE vulnerabilities. Valued between $18.9 million and $66.3 million based on bug bounty standards, the output is 16 to 55 times the pipeline's cost. The agents employed 10 new exploit techniques verified by third-party kernel experts. OpenAI is submitting vulnerability details and corresponding patches to Linux kernel maintainers.

Citește articolul complet pe 36Kr

Citește pe 36Kr ↗Întreabă despre acest articol